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Message delivery service support system has router-filter receives request 

message from queue by accessing account information in database server and 

determines request message assigned to outbound resources 

Patent Assignee: 32 global communications INC (jtwo-n) 
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us 7020132 Bl EN 18 8 Continuation of application US 
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Continuation of patent US 6597688 

Alerting Abstract US Bl , 
NOVELTY - A message queue stores a request message received from a 
customer of message delivery service through an internet. A router-filter 
receives a request message from the queue by accessing account information 
in a database server and determines request message assigned to the 
outbound resources. The outbound resources convert data associated with the 
received request message into a facsimile format. 

DESCRIPTION - INDEPENDENT CLAIMS are also included for the following: 

1. article comprising computer-readable medium storing message delivery 
service support program; and 

2. message delivery service support method. 

USE - For supporting message delivery service using computer and phone. 

ADVANTAGE - Enables providing high degree of scalability for handling 
variety of message types. 

description OF DRAWINGS - The figure shows a block diagram of the message 
delivery service support system. 
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Cl ai ms : \ 
...of the message delivery service, the server implements a router-filter \ 
and a message queue, the message queue to store a request message 
received from a customer of the message delivery service over an external 
packet-switched data network, the router- filter to obtain a request 
message from the queue, validate said request message by accessing the / 
account information in the database server, and determine to... 
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Electronic-mail transferring system in voice and data communication system, 
has processing server including message queue and router/filter, which is 
coupled to internal data network 
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Alerting Abstract US Al 

NOVELTY - An internal data network is provided for coupling to an 
external data network (15) e.g. Internet. A processing server (19) 
including a message queue (21) and a router/filter (23), and a database 
server are coupled to the internal data network. Another server coupled to 
the internal data network is coupled to a different network e.g. public 
switched telephone network (PSTN). 

USE - For transferring e-mail in voice and data communication system. 

ADVANTAGE - Allows the receipt and transmission of audio, voice and fax 
information between a circuit switched network and a packet switched 
network, reliably. Provides the high degree of scalability for handling a 
variety of message types. 

DESCRIPTION OF DRAWINGS - The figure shows the block diagram of the 
e-mail transferring system. 

15 External data network 

19 Processing server 

21 Message queue 

23 Router/filter 
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Original Abstracts : 

...over an external packet-switched data network are stored in a queue of a 
processing server * A router filter obtains a request message from 
the queue and validates a customer associated with the request message, 
after accessing the database server. A determination is made as to which 
of the multiple outbound resources... 
cl aims : 

...customers of the message delivery service, each processing server 
implements a router-filter and a message queue, the message queue to 
store request messages that are received from a customer of the 
message delivery service over an external packet-switched data... 

...filter to obtain a request message from the queue while polling the 
queue for pending requests , validate a customer associated with said 
request message after accessing the account information in *the database 
server, and determine to which of... 
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Remote programming apparatus for implantable medical device, has monitor to 
receive request to modify behavior of medical device from server through 
bidirectional communication system, and transmits to device at preset time 
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Alerting Abstract US Al 

NOVELTY - A server coupled to a monitor through a bidirectional 
communication system, receives request to modify behavior of an implantable 
medical device (10), from a clinician at one specific time period. The 
monitor receives the request from the server and transmits it to the 
medical device at other specific time period. 

description - INDEPENDENT CLAIMS are included for the following: 

1. Method for remotely programming implantable medical device; 
2. System for remotely programming implantable medical device. 

USE - For remotely programming implantable medical devices (IMDs) e.g. 
pacemaker, defibrillator, temperature sensor, motion sensor, respiration 
sensor and/or blood oxygen sensors. 

ADVANTAGE - Secure apparatus for creating, storing and transmitting 
program requests to an implantable medical devices. 

DESCRIPTION OF DRAWINGS - The figure shows a schematic view of the system 
for remotely programming IMDs. 

10 Implantable medical device 
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Claims: % 
...server coupled to the bi-directional communication network at a first ^ 
location and that receives, stores , and encrypts the requests , whereirr 
the server also verifies that the clinician is authorized to submit 
requests to the at least one of the plurality of implantable medical 
devices; anda plurality of monitors coupled to the bi- directional 
communication network at a plurality of second selected locations / 
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Alerting Abstract WO Al 

NOVELTY - The score management server (102) is connected to mobile 
terminals (103) via a wireless communication network (104). The server 



transmits score data stored in memory in response to requests received from 
mobile terminals which then display it. The server updates score data based 
on requests received from the mobile terminals for inputting new score 
data. 

DESCRIPTION - An INDEPENDENT CLAIM is included for a computer readable 
data recording medium storing program to be executed by the score 
management server. 

USE - For golf players, to enable presentation of scorecard type 
information on a standard mobile communication terminal, such as a portable 
phone . 

ADVANTAGE - Performs real-time display of scores of all players on each 
mobile terminal, thereby boosting the competitive spirit of the players and 
enhancing their enjoyment of the game. 

DESCRIPTION OF DRAWINGS - The figure shows the score management system. 

102 Score management server 

103 Mobile terminals 

104 wireless communication network 
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Alerting Abstract GB A 

NOVELTY - A client application (262) writes a request (267) for some data 
held at a disc controller (271) and the server application (263) reads 
from the cache (269) and decodes the request from its circular buffer 

(265) , before performing authentication and authorization on the 
request . if the request is accepted, the server application uses a 
two-part approach to send a replay, by writing the header part of the reply 

(266) into a circular buffer (264) and sending data of the reply (272) 
across the network to buffer (264) after checking there is sufficient 
capacity in the buffer. 

DESCRIPTION - INDEPENDENT CLAIMS are included for methods of 
synchronization between sending and receiving applications, for an 
asynchronous network interface, for a method of passing data and for a 
method of processing data bursts. 

USE - Synchronizing between sending and receiving applications. 
. DESCRIPTION OF DRAWINGS - The drawing shows a client-server interaction 
according to an embodiment of the invention 

262,263 Client and server applications 

271 Disc controller 

269 Cache * 
264,265 Circular buffers 

Title Terms/Index Terms/Additional Words: LOW; LATENT; NETWORK; 

SYNCHRONISATION; SEND; APPLY; RUN; FIRST; COMPUTER; RECEIVE; SECOND 

Class Codes 

International classification (Main): G06F-013/00, G06F-013/14, G06F-015/16, 
G06F-009/46 

(Additional/Secondary): G06F-013/38, H04L-029/06 
international classification (+ Attributes) 
IPC + Level Value Position status Version 

H04L-0012/28 A I L B 20060101 

H04L-0012/50 A I F B 20060101 

H04L-0012/56 A I F B 20060101 

H04Q-0011/00 A I L B 20060101 
US Classification, Issued: 709234000, 709236000, 370378000, 370389000 

File Segment: EPI; 
dwpi class: T01; W01 

Manual Codes (EPI/S-X) : T01-C07A; T01-C07C2; T01-F02C1; T01-H03A; T01-H05B2 
; W01-A04X; W01-A07H 

...writes a request (267) for some data held at a disc controller (271) and 
the server application (263) reads from the cache (269) and decodes the 

request from its circular buffer (265), before performing 
authentication and authorization on the request . If the request is 
accepted, the server application uses a two-part approach to send... 
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Remote data access security management method for use in multi -tiered 

network computer system, involves processing access request to remote data 

repository based on stored client credential 
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Alerting Abstract us A 

NOVELTY - Client access is authenticated to middle tier server (108) 
which intercepts client request for access to remote data repository . 
When stored client credentials to access data repository are not found, 
client credential is requested and validated with data repository, which 
is then used to process access request . 

DESCRIPTION - The validated credential is stored and associated with 
client user identifier and client session identifier before using for 
processing access request. The client access is authenticated based on the 
secure sockets layer protocol (SSC) and secure hypertext transfer protocol 
(SHTTP) . The remote data repositories are database server, transaction 
processing system server and groupware server. INDEPENDENT CLAIMS are also 
included for the following: 

1. remote data access security management system; 

2. program for managing remote data access security 

USE - For managing remote data access security in multi-tiered computer 
network system. 

ADVANTAGE - Enhances middle tier server with back end authentication 
management feature and by permitting multiple client access to multiple 
remote data repositories. Eliminates repeated request for authentication 
from server, once a client has been authenticated for a data repository, 
hence limits message traffic between server and client. Controls remote 
file system drive access by enforcing mount authentication before 
permitting client access to previously mounted remote file systems. 

DESCRIPTION OF DRAWINGS - The figure shows the block diagram of three 
tier distributed computer system. 

108 Middle tier server 

Title Terms/index Terms/Additional words: REMOTE; DATA; ACCESS; SECURE; 
MANAGEMENT; METHOD; MULTI ; TIER; NETWORK; COMPUTER; SYSTEM; PROCESS; 
REQUEST; REPOSITORY; BASED; STORAGE; CLIENT 

Class Codes 

International classification (Main): G06F-013/14 
US Classification, Issued: 713201000, 709225000 

File Segment: EPI; 
DWPI class: T01 

Manual Codes (EPI/S-X) : T01-H07C5A; T01-H07C5S; T01-H07P; T01-J12C; T01-S03 

...NOVELTY - Client access is authenticated to middle tier server (108) 
which intercepts client request for access to remote data repository . 
When stored client credentials to access data repository are not found, 
client credential is requested and validated with data repository, which 
is then used to process access request . 

Original Publication Data by Authority 



cl aims: 

...access to said middle tier server ; intercepting in said server a client 
request for access to a remote data repository jtesting for stored 



client credentials to access said remote data repository ; if not found, 
requesting client credentials and validating said credentials with said 
remote data repository, and storing and associating said validated 
credentials with a client user identifier and a client session 
identifier; and processing said request for accessing using stored 
client credentials. Basic Derwent Week: 200028 
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Alerting Abstract JP A 

NOVELTY - Subscribers (1) are connected through network (2) to server (3) 
which are in turn linked to another server (7). Service request received 
in server (3) is sent to server (7) for authentication . Memory (9) in 
server (7) stores session management identifier for authentication 
control. DETAILED DESCRIPTION - In server (3), data is sent or received, 
through transceiver (4). The request from subscriber is sent to server 
(7) through transceiver. On satisfactory completion of subscriber 
authentication , a controller (5) in server (3) permits service to be 
provided to the subscriber. The session management identifier for session 
management with each user is stored in session management identification 
memory (9). Only admissible session management identifiers from subscriber 
requests received from server (3), are stored in session management 
identifier memory. The subscriber interfacing with server (3) provides 
clearance for start of session after authentication by authentication 
controller (8). An INDEPENDENT CLAIM is also included for session 
management method. 

USE - For session control between client and server in internet. 

ADVANTAGE - Provides continuous access without need for repeated 
authentication. Enables use of common identification for several world wide 
web (WWW). Facilitates inter server session control by use of same 
identifier. DESCRIPTION of DRAWING(s) - The figure depicts schematic block 
diagram of session management system. (1) Subscriber; (2) Network; (3,7) 
Servers; (4) Transceiver; (5) controller; (8) Authentication controller; 
(9) Memory. 
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Alerting Abstract ...network (2) to server (3) which are in turn linked 
to another server (7). Service request received in server (3) is sent 
to server (7) for authentication . Memory (9) in server (7) stores session 
management identifier for authentication control. DETAILED DESCRIPTION - 
In server (3), data is sent or received through transceiver (4). The 
request from subscriber is sent to server (7) through transceiver. On 
satisfactory completion of subscriber authentication , a controller (5) in 
server (3) permits service to be provided to the subscriber. The... 

...is stored in session management identification memory (9). Only 
admissible session management identifiers from subscriber requests 
received from server (3), are stored in session management identifier 
memory. The subscriber interfacing with server (3) provides clearance for 
start ... 
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Authentication method for multiple accesses to web servers - involves 
initial authentication of user and downloading cookie that is used by 
server applications to verify user validity 
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Alerting Abstract wo Al 

The communications system has client terminals (T1-T3) linking to servers 
over a network, e.g. the Internet. The servers include application servers 
(APS) that interact with client applications. An authentication server 
provides security services to the application servers. When a user 
initially logs-on a connection to the authentication server is made. This 
performs the authentication and also downloads a "cookie" to the user 
terminal. The server checks the user connection periodically. 

An application server receives a. user request and verifies it with the 
authentication server. Subsequently the returned cookie is used for 
continuing authentication. 

ADVANTAGE - Reduces processing and communication resources needed to 
maintain a security check on a user. 
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Claims: 

...authentication details ;transmitting a validated identifier for uniquely 
identifying the user's client terminal (T3) to said client terminal 
(T3) for storage thereon, the said client terminal (T3) re- transmitting 

said validated identifier with document requests directed at said 
resource server (APS) ;storing status data indicating that said validated 
identifier is a validated identifier of a client terminal (T3) of a 



currently authenticated user; andsaid authenticating server (AS) 
validating a request for said document from the user's client terminal 
(T3) , which request includes said validated identifier, by checking said 
status ... 

Basic Derwent Week: 199908 ... 



37/69,K/53 (Item 53 from file: 350) 

DIALOG (R) Fil e 350: Derwent WPIX 
(c) 2007 The Thomson Corporation. All rts. 



reserv. 



0008206407 - Drawing available 
WPI ACC NO: 1997-310764/ 199728 
XRPX Acc No: N1997-257395 
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client workstations feeding service orders to mid range server and then to 
main database with checking at each stage 
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Alerting Abstract WO A2 

The computer system for processing service orders, e.g. for telephone 
networks, has a hierarchy of stages. A number of client workstations (18) 
are connected to a mid-range server (14) that maintains a mid-range 
database (20). The workstations are used to input service requests from 
customers. The requests are passed to the mid-range server that check them 
for consistency within the limits of its database. 

The valid requests are transferred to a universal server (26) with a 
staging database (42). This applies further checking for inconsistencies 
with main databases (30-34) and other inputs. Valid requests are stored in 
the databases as appropriate. 

ADVANTAGE - Avoids corruption of main database data and requests that are 
inconsistent with other orders or client installations. 
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Claims: , 
...for accepting requests from a number of workstations ; a midrange database; 
connected to the midrange server for storing the requestjthe midrange 
server performing an initial validation of the request ;a universal 
server connected to the midrange server and mainframe databases ;a 
staging database connected to the universal server for storing an initially , 

validated request; the universal server comparing customer data, acquired 
from the mainframe databases, against the request stored in the 
staging database , to determine if conflicts exist with other requests 
being processed , or with the customer's system;the request being posted 
to at least one of the... 
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Message transmission guarantee system for network communication - provides 
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on check demand from evidence check server 
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Alerting Abstract DP A 

The guarantee system connects a number of transmitting and receiving 
terminals of work stations through a network (1). When a message is 
transmitted from a first workstation (10) to a second workstation (20), 
then based on the transmission of evidence production demand from the AP 
(13) of the first workstation, an evidence production server (2) connected 
to the network starts transmission. 

The first workstation transmits the evidence information along with the 
message to the second workstation. The server provides an evidence 
information based on the check demand from an evidence check server (3). 
The evidence check server saves the received evidence information, which 
has been answered. A check demand for evidence information is received from 
the AP of the first workstation and the presence of the evidence 
information is checked and the check result is sent to the first 
workstation. 

ADVANTAGE -■ Guarantees message transmission and reception between 
terminals. Provides evidence information of high reliability. Provides 
accurate judgement result. Enhances security to transmission and reception. 
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original Abstracts : 

...1 and sends it to the WS 1. The ws 1 sends the message along with the 
evidence to the WS 2. The evidence preparing server then prepares 
reception evidence based on a request from an evidence verifying 
server (a third party) acting for the WS 2. The reception evidence thus 
prepared is retained by the evidence preparing server and is also 
returned to the evidence varying server. The evidence verifying server 
retains the reception evidence. When an... 

...to the WS <b>l. </b>The WS <b>l </b>sends the message along with the 
evidence to the WS <b>2 . </b>The evidence preparing server then 
prepares reception evidence based on a request from an evidence 
verifying server (a third party) acting for the WS <b>2 . </b>The reception 
evidence thus prepared is retained by the evidence preparing server and is 
also returned to the evidence varying server . The evidence verifying 
server retains the reception evidence. When an application program on 
the WS <b>l </b>requests verification of the reception evidence... 
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ABSTRACT 

PROBLEM TO BE SOLVED: To allow as many users as possible to use limited 
data base resources in a large-scaled data hase server system. 

SOLUTION: In this data base server processing method, DB connection* 
processing requests from users 113-115 are stored in connection user' ( 
information 109, and the users are allowed to occupy a DB resource 112 by i 
the minimum transaction (TR) units for guaranteeing the matching of DB \ 
processing according transaction (TR) execution requests from the! 
users, and the authentication information of a plurality of users having 
the same DB access authorities is replaced with a single piece of 
authentication information (103, 104). When the DB resource 112 is being 
connected to a DB 110 according to authentication information, ana 
authentication information related with a TR to be executed is equal to a 
piece of authentication information, the TR stored in the DB resource is 
executed without executing any DB connection processing or DB disconnection 
processing to the DB, and when the queue of TR execution requests is 
formed, the order of DB resource assignment is decided by a queue managing 
device 105 by using a priority definition information 106 and storage user 
information 108. 

COPYRIGHT: (C)2001,JPO 
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Alerting Abstract US Al 

NOVELTY - A transmitting end router (2) stores the e-mail acquired from 
transmitter (1), in a cache (3) and transmits the e-mail to receiving end 
router, when an information processing apparatus authenticates the user of 
transmitter and determines that receiving end terminal is capable of 
receiving the e-mail. The receiving end router stores the e-mail and 
transmits the data to receiving end terminal. 

DESCRIPTION - INDEPENDENT CLAIMS are also included for the following: 

I. information processing apparatus; 
2. information processing method; 

3. storage medium storing information processing apparatus control 
program; 

4. information processing apparatus control program; 

5 . transmitting end router; 

6. transmitting end router control method; 

7. storage medium storing transmitting end router control program; 

8. transmitting end router control program; 

9. receiving end router control method; 

10. storage medium storing receiving end router control program; and 

II. receiving end router control program. 



USE - For transmitting e-mail from transmitting end terminal to receivi 
end terminal . 

ADVANTAGE - since the e-mail is transmitted only after confirming that 
receiver is capable of receiving the e-mail, the data of large size is 
reliably transmitted and received without reduction in processing speed. 

DESCRIPTION OF DRAWINGS - The figure shows the configuration of the 
e-mail transmission system. 

1 transmitting end terminal 

2 transmitting end router 
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5 receiving end router 
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10 network 
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...receiving-end terminal device can receive the electronic mail. If the 
authentication of the user is successful and if it is determined that 
receiving-end terminal device can receive the electronic... 

...to the receiving-end cache without passing it through the POB server. 
The receiving-end cache stores the received electronic mail and 
transmits a message , indicating that the electronic mail has arrived 
to the receiving-end terminal device. In response... 
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XRPX Acc No: N2003-333454 

Message recipient authentication method for business transaction, involves 

receiving authentication response from recipient for authentication, when 

decryption value is equal to specific constant 
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Alerting Abstract US Al 

NOVELTY - The password (P) and random numbers generated as initialization 
vectors (IV1,IV2) are sent to a message recipient. Another initialization 
vector (IV3) and authentication response are received from the recipient. 
The recipient is authenticated by using a response key, only if the 
decryption value is equal to a specific constant. 

DESCRIPTION - INDEPENDENT CLAIMS are also included for the following: 

1. encrypted message sending method; 

2 . authentication responding method; 

3. encrypted message receiving method; 

4. secure communication establishing method; 

5. sender data processing system; 

6. server data processing system; 

7. message recipient data processing system ; 

8. computer-readable medium storing sender data processing system 
control program ; 

9 . computer-readable medium storing server data processing system 
control program ; and 

10 . computer-readable medium storing message recipient data processing 
system control program . 

USE - For authenticating message recipient in security system, 
server-client computer for business transaction. 

ADVANTAGE - Improves security and ensures privacy, since the message 
recipient is authenticated by using Merkle's meta process for hashing 
password. 

DESCRIPTION OF DRAWINGS - The figure shows a flowchart illustrating 
authentication of message recipient. 
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Alerting Abstract EP A2 

NOVELTY - The method involves transmitting an electronic mail having the 
uniform resource locator information to a receiving destination address 
included in the electronic mail creation information. The uniform resource 
locator information indicates the entry position of the attached file that 
has been entered in a storage unit of a server system. 



DESCRIPTION - The electronic mail creation information and a user 
authentication information are included in the electronic mail 
transmitted from a transmission source to the server system. The 
attached file in the electronic mail is entered into the storage unit 
of the server system, when the identification of the user has been 
authenticated based on the user authentication information. An INDEPENDENT 
CLAIM is also included for a data distribution system. 

USE - Used for distributing data. 

ADVANTAGE - Enables entry of data in a server by using electronic mail, 
without restricting terminals on transmitting ends. Informs person with 
whom data are to be shared, about entry position information corresponding 
to entered data. Performs reliable user authentication since authentication 
is performed using user identification information. Enables clients to view 
attached file since data of attached file are shared on server. Improves 
data distribution convenience. Enables transmission source to designate 
desired entry position so as to enter attached file. Enables easily 
processing attached file without necessity of processing attached file at 
transmission source terminal. Eases retrieval of associated files. Eases 
showing of related files to receiver of electronic mail. Prevents 
unnecessary data from being accumulated in storage unit of display system. 

DESCRIPTION OF DRAWINGS - The figure shows the block diagram of the data 
distribution system. 
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Alerting Abstract DESCRIPTION - The electronic mail creation information 
and a user authentication information are included in the electronic 
mail transmitted from a transmission source to the server system. The 
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of the server system, when the identification of the user has been 
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Cl ai ms : 

...having second electronic mail creation information including at least a 
receiving destination address, and user authentication information 
including a user ID of a transmitter, with attaching a file to the 
electronic. . . 

...on the basis of the user ID included in the user authentication 
information in the transmitted electronic mail , and user IDs which 
are previously stored in a user information database of the server 
system;an entry step of entering... 

...position of the attached file that has been entered in the storage unit, 
in the server system, and transmitting a second electronic mail 
having the URL information to the receiving destination address that is 
included in the second electronic mail creation... 



...having second electronic mail creation information including at least a 
receiving destination address, and user authentication information 
including a user ID of a transmitter, with attaching a file to the 
electronic. . . 

...information database of the server system;an entry step of entering the 
attached file in a storage unit of the server system when the user 
has been authenticated; anda second transmission step of creating a... 

...of the attached file that has been entered in the storage unit, in the 
server system , and transmitting a second electronic mail having the 
URL information to the receiving destination address that is included in 
the second electronic mail creation information. 
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Alerting Abstract EP A2 

The TV mail system comprises a number of televisions (10) each having a 
receiving function for broadcast radio waves and displays a program. A mail 
server (20,30) is connected to the televisions via communication lines. A 
television has a mail sending function (12,14) for creating a mail item 
including at least destination information and a message item for output to 



the mail server, and a mail receiving function for displaying the contents 
of mail data sent from the server. 

The mail server has a database (35) in which authentication information 
of users are registered. A receiving mail box (36) stores received mail 
data, and mail boxes (37) are provided for receivers. A mail distribution 
system (39) supplies the mail items to the receivers. Mail data is stored 
in the authentication database and an output device (33) sends out the mail 
data received from one television set to a different television receiver. 

ADVANTAGE - Provides for wider use of TV network and of TV receiver 
functionality. 
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original Abstracts: 

.. .with the received mail, the mail server has a database in which 
authentication information of users are registered, a receiving ^mail 
^box for storing received mail data, mail boxes for receivers, "a 
mail distribution device for distributing , to a mail box for the 
receiver, m ail data s tored in the rgceiving mail .box by making a reference 
teethe authentication database^ and an outputting device "which sends 
out the' " mail data received from one television to at least one 
different television in corresponding with the destination information, 
claims : 

...14) for receiving mail data sent from said mail server and for 
displaying the contents of mail data sent from said mail server (20, 30), 
andsaid mail server (20, 30) has a database (35) in which authentication 
information of users are registered, a receiving mail box (36) for 
storing received mail data, mail boxes (37) for respective users, a 
mail distribution means (39) for distributing, to a mail box (37) for a 
user, mail data stored in said authentication database (35) and an 
outputting means (33) which sends out the mail data received from 
one television to a least one different television in correspondence with 
the destination information. 

s. . . 
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ABSTRACT EP 1274225 Al 

Employees (902) of an organization access an application (906) to 
electronically submit orders for copy reproductions to a copy 
reproduction service provider (912). Using the application (906), an 
employee (902) can select the desired copy reproduction service and begin 
to complete the appropriate order form. Once the order form is completed 
the employee (902) selects the file or files with the material to be 
processed. The order information and files are then stored in a database 
(910), which can be accessed by the copy reproduction service provider 
(912) through a service provider application (916). Using the service 
provider application (916), the copy reproduction service provider (912) 
can view details of the order, download any required files and update the 
status of the order. The employee (902) can view the status of an order, 
as it is updated, with the application (906). Finally, when the copy 
reproduction service provider (912) completes an order, the copy 
reproduction service provider (912) can distribute the order as 
instructed by the employee (902). 

ABSTRACT WORD COUNT: 169 
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...CLAIMS additional server computer (917) comprising a storage device to 
store the additional application (916) for processing copy 
reproduction requests ; and 
means for a copy reproduction service provider (912) to provide 

authentication information to access the additional application 
(916) for processing copy reproduction requests stored on the 
additional server computer (917). 
5. The system of claim 4 wherein the additional application (916) for 
processing. . . 
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An apparatus, method and computer program is disclosed which allows for 
the extraction of user-customized subsets of data from a central database 
stored in a central server computer at a remote terminal computer. The 
user-customized data subset extracted is stored in a computer readable 
form, along with other corollary information such that the data contained 
in the subset can be viewed and used on the terminal or another computer 
in an offline state, without an active connection to said central 
database during viewing. The corollary information stored along with the 
extracted data subset can allow for the further personalized viewing of 
the extracted subset by more than one end user or viewer. Only the data 
selected by the authorized user of the central database is contained in 
the extracted subset. 
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...SPECIFICATION parameters were passed through to the central database for 
extraction. 

In this embodiment, valid extraction requests could be stored in 
the central server computer (1) either in the central database (23) or 
in a separate database, against which user extraction requests could be 
validated . The extraction criteria to be employed in the execution of 
each extraction request could also be stored in the same place, such 
that when the user of the. . .convert those data values to an alternative 
scale or format. 

The extraction request might be validated upon receipt by the central 
server, such that only allowable extraction requests will be executed 
against the central database. 

Where valid extraction requests are stored in the central server 
computer, against which user extraction requests are validated in advance 
of their execution, extraction criteria to be associated with each valid 
extraction request could also be stored in the central server 
computer, either in the central database or in a separate database, such 
that upon the... a later date. For example, if all of the extraction 
criteria associated with certain extraction requests were stored in 
the central server computer, at a later date the user of the remote 
terminal computer could simply input a request identifier, password or 
the like as their extraction request which would then be transmitted 
to the central server computer and, upon validation by the central 
server, the remainder of the parameters of the extraction request 
associated with. . . 

...CLAIMS the extracted subset. 

8. The apparatus of Claim 7 wherein extraction criteria for valid 

extraction requests are stored in the central server computer, 
such extraction criteria being employed in execution of an 
extraction request upon receipt and validation of said associated 
extraction request by the central server computer. 

9. The apparatus of claim... 
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at distinct nodes. The computer at each node of the distributed system 
has a trusted computing base that includes an authentication agent for 
authenticating requests received from principals at other nodes in the 
system. Requests are transmitted to servers as messages that include a 
first identifier provided by the requester and a second identifier 
provided by the authentication agent of the requester node. Each server 
process is provided with a local cache of authentication data that 
identifies requesters whose previous request messages have been 
authenticated, when a request is received, the server checks the 
request's first and second identifiers against the entries in its local 
cache. If there is a match, then the request is known to be authentic. 
Otherwise, the server node's authentication agent is called to obtain 
authentication credentials from the requester s node to authenticate the 
request message. The principal identifier of the requester and the 
received credentials are stored in a local cache by the server node's 
authentication agent. The server process also stores a record in its 
local cache indicating that request messages from the specified requester 
are known to be authentic, thereby expediting the process of 
authenticating received requests, (see image in original document) 
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..SPECIFICATION at each node of the distributed system has a trusted 
computing base that includes an authentication agent for 
authenticating requests received from principals at other nodes in the 
system. Requests are transmitted to servers as messages that include 
a first identifier (called an Auth ID) provided by the requester and a 
second identifier provided (called the subchannel value) by the 
authentication agent of the requester node. Each server process 
has an associated local cache that identifies requesters whose 
previous request messages have been authenticated . When a request is 
received, the server checks the request's first and second identifiers... 

..record 162 for the requester is still valid, that means the request 
message is "pre- authenticated ", in which case the authentication 
agent notifies the server process that the request message is 
authentic (step 212) and passes to the server process the timestamp and 
(optionally) the Principal ID for the requester. By including the 
Principal ID of the requester in the server process' local cache 
164, accessing objects using the requester 's Principal ID is made more 
efficient. 

If the requester's Auth ID in not found in the authentication agent's 
local cache 160, then the authentication agent sends a request to 
the authentication agent of the requester's node for credentials to 
authenticate the request message (step 214). The authentication agent of 
the requester's node checks the... 

..SPECIFICATION at each node of the distributed system has a trusted 
computing base that includes an authentication agent for 
authenticating requests received from principals at other nodes in the 
system. Requests are transmitted to servers as messages that include 
a first identifier (called an Auth ID) provided by the requester and a 
second identifier provided (called the subchannel value) by the 
authentication agent of the requester node. Each server process 
has an associated local cache that identifies requesters whose 
previous request messages have been authenticated . when a request is 
received, the server checks the request's first and second identifiers... 

..record 162 for the requester is still valid, that means the request 
message is "pre- authenticated ", in which case the authentication 
agent notifies the server process that the request message is 
authentic (step 212) and passes to the server process the timestamp and 
(optionally) the Principal ID for the requester. By including the 
Principal ID of the requester in the server process' local cache 
164, accessing objects using the requester 's Principal ID is made more 
efficient. 

If the requester's Auth ID in not found in the authentication agent's 
local cache 160, then the authentication agent sends a request to 
the authentication agent of the requester's node for credentials to 
authenticate the request message (step 214). The authentication agent of 
the requester's node checks the... 



.CLAIMS the server processes; and 

each server process includes: 



cache means for maintaining its own local cache of data 
identifying previously authenticated requests received by the 
server process ; and 

local authenticating means for authenticating a received 
request when the first data in the received request matches the data 
maintained . . . 

. . . CLAIMS Bl. . .BN) ; and 

each server process incl udes : cache means (164) for maintaining its 
own local cache of data identifying previously authenticated 
requests received by the server process ; and 

local authenticating means (162) for authenticating a received 
request when the first data in the received request matches the data 
maintained . . . 
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English Abstract 

A method, system and computer program for processing data objects in a 
distributed data processing system, said distributed data processing 
system having a plurality of software and/or hardware nodes being 



communicatively connectable. The method comprises the steps of defining 
first and second environments for processing objects at differ levels of 
abstraction , namely a first platform independen level and a second 
platform dependent level operating with different categories of object 
aspects. Each object is defined according to two object models, one for 
the platform independent environment and one for the platform dependent 
environment. The two object models are syncronized and object instances 
generated on the basis of said models are processed in the respective 
environments dependent on the aspects of the current object instance. 

French Abstract 

L'invention concerne un procede, un systeme ainsi qu'un programme 
informatique de traitement d'objets de donnees dans un systeme reparti de 
traitement de donnees, ledit systeme reparti de traitement de donnees 
presentant une pluralite de noeuds logiciels et/ou materiel interfacables 
de maniere communicative. Ledit procede comprend les etapes de definition 
d'un premier et d'un second envi ronnement destines a traiter des objets a 
differents niveaux d ' abstraction , notamment un premier niveau independant 
d'une plate-forme et un second niveau dependant d'une plate-forme 
fonctionnant au moyen de plusieurs categories d'aspects d'objets. chaque 
objet est defini selon deux modeles d'objets, l'un pour 1 ' envi ronnement 
independant de la plate-forme et 1 'autre pour 1 ' envi ronnement dependant 
de la plate-forme. Les deux modeles d'objets sont synchronises et des 
instances d'objets generees sur la base desdits modeles sont traitees 
dans les envi ronnements respectifs dependants desdits aspects de 
1' instance d'objets courants. 
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Detailed Description 

... delivery system 16 and file delivery system 18, as described in detail 
below. 

Upon proper authentication of the user 1 1, the user may send the 
request service signal 3 6 to the system 16 that receives the signal 3 
...40 to determine if there is a pre-existing session associated with the 
user's request . if there is a session stored in the session server 
40, the server 40 sends back a deliver session signal 42 to the system 16 
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English Abstract 

A technique is provided for dynamically rendering graphical user 
interface pages over a computer network using customized information from 
a backend computing system. Using the technique of the present invention, 
a user is able to send a request for accessing specific information from 
the backend computing system by making a call on a remote server. In a 
specific embodiment, the present invention is configured to allow 
consumers to conduct billing transactions over the Internet. The present 
invention uses a thin server interface model for interfacing a consumer 
or user with the customized backend computing systems of one or more 
specific service providers. The data structure which is used by the user . 
to implement the call request in the remote server may be modified 
without requiring modifications to the software code in either the client 
machine or the remote server engine. Further, new applications and/or 
call requests may be implemented within the system without requiring 
modification and recompilation of the user and server machine codes. 

French Abstract 

Cette invention a trait a une technique permettant de rendre de maniere 
dynamique des pages graphiques d' interface utilisateur sur un reseau 
informatique par utilisation d'une information personnal isee provenant 
d'un systeme informatique principal. En mettant en oeuvre cette 
technique, un utilisateur est a meme d'envoyer une demande d'acces a une 
information specifique relevant du systeme informatique principal et ce, 
en lancant un appel sur un serveur a distance. Dans un mode de 
realisation specifique, des consommateurs ont la possibilite de mener des 
transactions de facturation sur 1'lnternet. on utilise, dans le cadre de 
cette technique, un model e fin d' interface serveur pour interfacer un 
consommateur ou un utilisateur et des systemes informatiques principaux 
personnalises appartenant a un ou a plusieurs prestataires de services 



specif iques . 
utilisee par 
apporter des 



II est possible de modifier la structure desdonnees 
1 ' util isateur pour effectuer la demande d'appel sans avoir a 
modifications au code loqiciel, que ce soit dans la machine 
client ou dans le moteur du serveur eloigne. Il est, de surcroit, 
possible, a l'interieur du systeme. de mettre en oeuvre de nouvelles 
applications et/ou de proceder a des demandes d'appel sans qu'il soit 
necessaire de modifier et de recompiler les codes machine de 
1 ' utilisateur et du serveur. 
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English Abstract 

A web-based, integrated customer interface system (30) for enabling 
customer management of their communication network assets. A web-based 
GUI (20) enables a customer to interact with one or more network 
management resources and telecommunication services. The integrated 
interface system (30) includes: 1) a customer's network report 
management; 2) a centralized in-box system for online notifications to 
client workstation; 3) a real-time network services monitoring system; 4) 
broadband system for presenting physical and logical views of data 
networks and performance information; 5) a toll-free network management 
system enabling customization of 800/8xx toll free number routing; 6) 
outbound Network Management (ONM) ; 7) packet-switched events monitoring; 
8) a trouble ticket tool; 9) web-based invoice reporting for access to 
billing information; 10) web-based call manager; 11) on-line order entry 
and administrative service; 12) system for handling security and 
authentication. 

French Abstract 

Cette invention se rapporte a un systeme d'interface client integree 
(30) basee sur le Web, qui est concu pour permettre a des clients de 
gerer leurs avoirs sur des reseaux de communication. A cet effet, une 
interface utilisateur graphique (GUI) (20) basee sur le Web permet a un 
client d'interaqir avec une ou plusieurs ressources de gestion de reseau 
et avec un ou plusieurs services de telecommunications, ce systeme 
d'interface integree (30) comprend: 1) une fonction de gestion de 
rapports reseau du client; 2) un systeme de corbeille d arrivee 
centralise pour les notifications en ligne adressees a la station de 
travail client; 3) un systeme de surveillance des services de reseau en 
temps reel; 4) un systeme a bande large servant a presenter des vues 
physiques et logiques des reseaux de donnees et des informations sur les 
performances; 5) un systeme de gestion de reseau gratuit, permettant la 
personnal isation de 1 ' achemi nement des numeros gratuits du type 800/8xx; 
6) une fonction de gestion de reseau de transmissions sortantes (ONM) ; 7) 
une fonction de surveillance des evenements a commutation par paquets; 8) 
un outil de gestion des appels de depannage; 9) une fonction de rapport 
sur les factures basee sur le Web et permettant l'acces aux informations 
de facturation; 10) un gestionnaire d'appels base sur le Web; 11) un 
service d ' administration et d'entree des commandes en ligne; 12) et un 
systeme de gestion de la securite et de 1 ' authentication . 
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Detailed Description 
examined to 

reveal the user and the target middle-tier (Intranet 
application) service for the request . A first-level 

validation is performed , making sure that the user is 
entitled to communicate with the desired service. The 
user's entitlements in this regard are fetched by the 
dispatch server 26 from StarOE server 39 at logon time 
and cached . 

If the requestor is authorized to communicate 
with the target service, the message is forwarded to 
the desired. .. referred to 
SUBSTITUTE SHEET (RULE 26) 

as a StarOE client application. The StarOE server 39 
processes a number of transaction requests relating to 
authentication and entitlements, from other application 

services, both from the client and the application 

server 158 sides of the network, in addition, the 

StarOE server 39 receives transaction requests from the 

StarOE client application, The transactions are 

typically message driven and comprise requesting 

transactions ... user report 

inventory. Preferably, an SQL interface is utilized to 
access stored procedures used in processing requests 
and tracking customer reports, A variety of C++ tools 
and other tools such as Rogue... 

. . .functions . 

The Report Manager server 250 additionally 
includes the scheduling information, however, a report 
scheduler server component passes the report request to 
the back-end fulfilling servers 400, 500 at the... 

...IRS") server component 260 interfaces directly with 
the Report Manager server 250 to coordinate report 

request scheduling and processing . It should be 
understood that the respective report management and 
scheduling functions could be performed. . .functionality a user can 
perform within the StarWRS 

application. In the preferred embodiment, a Report 
request may be executed immediately, periodically, or 

as "one-shots" to be per-formed at a later time. As 

described herein, the report scheduler service 
maintains a list of requested reports for a given user, 

and forwards actual report requests to the appropriate 

middle-tier .. .then determined and the appropriate service will be 

invoked after which a standard response is sent back to 

the request i ng cl i ent . 

The Report Manager 250 implements stored 
procedures to translate the message, perform the 

request, and send the information back to the... and verifies the user's 

security with NetCap. once the user's security has 

been verified , the TFNM server submits the QUIK request 

to NetCap 290 via Registry messaging. 

After a TEMP QUIK and/or QUIK request has... 



.future 

implementation. In view of Figure 26,,NetCap sends a 
registry message to the TFNM server acknowledging that 
the request has been stored . 

Included in the Registry message calls that are 
transmitted to the TFNM server from NetCap... 
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user's entitlements in this regard are fetched by the 
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and cached . 

If the requestor is authorized to communicate 

with the target service, the message is forwarded to 
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to NetCap 240 via Registry messaging. 

After a TEMP QUIK and/or QUIK request has... 

. . .future 

implementation, in view of Figure 6, NetCap sends a 
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the request has been stored . 
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Additional Information: full citation , abstract , references , citings , index 
terms, review 



Full text available: || pdf (5.33 MB) 



The purpose of a distributed file system (DFS) is to allow users of physically distributed 
computers to share data and storage resources by using a common file system. A typical 
configuration for a DFS is a collection of workstations and mainframes connected by a 
local area network (LAN). A DFS is implemented as part of the operating system of each 
of the connected computers. This paper establishes a viewpoint that emphasizes the 
dispersed structure and decentralization of both data and con ... 

2 Broadcast protocols to support efficient retrieval from databases by mobile users 
Anindya Datta, Debra E. VanderMeer, Aslihan Celik, Vijay Kumar 
March 1999 ACM Transactions on Database Systems (TODS), Volume 24 issue l 

Publisher: ACM Press 

Additional Information: full citation , abstract , references , citings , index 
terms , revie w 



Full text available: 1 



Mobile computing has the potential for managing information globally. Data management 
issues in mobile computing have received some attention in recent times, and the design 
of adaptive braodcast protocols has been posed as an important probllem. Such protocols 
are employed by database servers to decide on the content of bbroadcasts dynamically, in 
response to client mobility and demand patterns. In this paper we design such protocols 
and also propose efficient retrieval s ... 

Keywords: adaptive broadcast protocols, client-server computing, energy conservation, 
mobile databases 
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Some of the most difficult questions to answer when designing a distributed application 
are related to mobility: what information to transfer between sites and when and how to 
transfer it. Network-transparent distribution, the property that a program's behavior is 
independent of how it is partitioned among sites, does not directly address these 
questions. Therefore we propose to extend all language entities with a network behavior 
that enables efficient distributed programm ... 

Keywords: latency tolerance, mobile objects, network transparency 



4 HTTP Cookies: Standards, privacy, and politics 
David M. Kristol 

^ November 2001 ACM Transactions on Internet Technology (TOIT), Volume l issue 2 
Publisher: ACM Press 

Full text available: ffW(390.38 KB) Additional information: MLdtation, abstract, references , dtings. index 
^ terms 

How did we get from a world where cookies were something you ate and where 
"nontechies" were unaware of "Netscape cookies" to a world where cookies are a hot- 
button privacy issue for many computer users? This article describes how HTTP "cookies" 
work and how Netscape's original specification evolved into an IETF Proposed Standard. I 
also offer a personal perspective on how what began as a straightforward technical 
specification turned into a political flashpoint when it tried to address nontechn ... 

Keywords: Cookies, HTTP, World Wide Web, privacy, state management 
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Murthy Devarakonda, Bill Kish, Ajay Mohindra 

August 1996 ACM Transactions on Computer Systems (TOCS), volume 14 issue 3 
Publisher: ACM Press 

Full text available: ff|pdf(318.88 KB) Additional Information: full citation, abstract, references , citings, index 
m K v 1 terms , review 

This article presents the deign and implementation of the recovery scheme in Calypso. 
Calypso is a cluster-optimized, distributed file system for UNIX clusters. As in Sprite and 
AFS, Calypso servers are stateful and scale well to a large number of clients. The recovery 
scheme in Calypso is nondisruptive, meaning that open files remain open, client modified 
data are saved, and in-flight operations are properly handled across server recover. The 
scheme uses distributed state amount the client ... 

Keywords: Calypso, cluster systems, distributed state, state reconstruction 



Design of a high-performance ATM firewall 
Jun Xu, Mukesh Singhal 

August 1999 ACM Transactions on Information and System Security (TISSEC), Volume 2 

Issue 3 

Publisher: ACM Press 

Full text available: pdf(143.19 KB) Additional Information: full citation , abstract , references , index terms 

A router-based packet-filtering firewall is an effective way of protecting an enterprise 
network from unauthorized access. However, it will not work efficiently in an ATM network 
because it requires the termination of end-to-end ATM connections at a packet-filtering 
router, which incurs huge overhead of SAR (Segmentation and Reassembly). Very few 
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approaches to this problem have been proposed in the literature, and none is completely 
satisfactory. In this paper we present the hardware desig ... 

Keywords: TCP/IP, asynchronous transfer mode, firewall, packet filtering, switch 
architecture 
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Fast detection of communication patterns in distribu ted executi ons 
Thomas Kunz, Michiel F. H. Seuren 

November 1997 Proceedings of the 1997 conference of the Centre for Advanced 

Studies on Collaborative research CASCON '97 
Publisher: IBM Press 

Full text available: ^gpdf(4.21 MB) Additional Information: full citation , abstract, references , index terms 

Understanding distributed applications is a tedious and difficult task. Visualizations based 
on process-time diagrams are often used to obtain a better understanding of the 
execution of the application. The visualization tool we use is Poet, an event tracer 
developed at the University of Waterloo. However, these diagrams are often very complex 
and do not provide the user with the desired overview of the application. In our 
experience, such tools display repeated occurrences of non-trivial commun ... 

Efficient logic variables for distributed computing 

Seif Haridi, Peter Van Roy, Per Brand, Michael Mehl, Ralf Scheidhauer, Gert Smolka 
May 1999 ACM Transactions on Programming Languages and Systems (TOPLAS), 

Volume 21 Issue 3 
Publisher: ACM Press 

Full text available- f53 pdf(572 35 KB) Ac,ditional Information: full citation , abstract , references , citings , index 

! terms 

We define a practical algorithm for distrubuted rational tree unification and prove its 
correctness in both the off-line and on-line cases. We derive the distributed algorithm 
from a centralized one, showing clearly the trade-offs between local and distributed 
execution. The algorithm is used to realize logic variables in the Mozart Programming 
System, which implements the Oz language (see http://www/mozart-oz.org). Oz appears 
to the programmer as a concurrent object-oriented language with ... 

Keywords: Mozart, Oz, distributed algorithms 



The V distributed system 
David Cheriton 

March 1988 Communications of the ACM, Volume 31 issue 3 
Publisher: ACM Press 

Full text available" f£l odf(2 55 MB) Additional Information: full citation , abstract, r efe r ences , citings , index 

terms, review 

The V distributed System was developed at Stanford University as part of a research 
project to explore issues in distributed systems. Aspects of the design suggest important 
directions for the design of future operating systems and communication systems. 
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September 2001 Proceedings of the 14th international symposium on Systems 
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This paper will show how NP can be used for complicated tasks including advanced 
classification of packets. Advanced classification requires the NP to look beyond the layer 
3-4 header of the protocol, deep into the session and application layer payload. Dubbed 
"content inspection", such advanced classification requires specialized high-performance 
ICs, and a powerful and sophisticated set of tools for programming the ICs. These tools 
enable users of advanced classifiers to describe protocols usi ... 

11 Tools and approaches for developing data-intensive Web applications: a survey 
Piero Fraternali 

September 1999 ACM Computing Surveys (CSUR), volume 31 issue 3 
Publisher: ACM Press 

Full text available* Hi odf(524 80 KB) Additional Information: full citation , abstract , references , citings , index 
■ Ha- — terms 

The exponential growth and capillar diffusion of the Web are nurturing a novel generation 
of applications, characterized by a direct business-to-customer relationship. The 
development of such applications is a hybrid between traditional IS development and 
Hypermedia authoring, and challenges the existing tools and approaches for software 
production. This paper investigates the current situation of Web development tools, both 
in the commercial and research fields, by identifying and characte ... 

Keywords: HTML, Intranet, WWW, application, development 
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Proceedings of the 2001 ACM SIGPLAN workshop on Optimization of 
middleware and distributed systems OM '01, volume 36 issue 8 
Publisher: ACM Press 

Full text available* 1^1 odf(239 32 KB) Addit ' ona ' Information: full citation , abstract , references , citings , index 
'™ terms 

Load balancing middleware is used extensively to improve scalability and overall system 
throughput in distributed systems. Many load balancing middleware services are 
simplistic, however, since they are geared only for specie use-cases and environments. 
These limitations make it hard to use the same load balancing service for anything other 
than the distributed application it was designed for originally. This lack of generality forces 
continuous re-development of application-specie load balancin ... 

Keywords: CORBA, load balancing, middleware, patterns, scalability 
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Full text available: f Bpdf(81 5.01 KB) 

terms 

Distributed applications in a wireless environment often suffer from sudden connection 
losses. Furthermore, scarce bandwidth and high error rates may affect data transmission 
so that traditional Internet protocols like TCP show unwanted behaviour. However, one of 
today's most popular middleware architectures, namely the Common Object Request 
Broker Architecture CORBA, is built on top of TCP. Hence, its extension into the wireless 
and mobile environment has to be carefully designed. This pap ... 

15 Principled design of the modern Web architecture 
Roy T. Fielding, Richard N. Taylor 

June 2000 Proceedings of the 22nd international conference on Software 

engineering ICSE '00 
Publisher: ACM Press 

Full text available* fH odf(21 7 34 KB) Add it' onal information: full citati o n , abstract, re ferences , citings, index 

terms 

The World Wide Web has succeeded in large part because its software architecture has 
been designed to meet the needs of an Internet-scale distributed hypermedia system. The 
modern Web architecture emphasizes scalability of component interactions, generality of 
interfaces, independent deployment of components, and intermediary components to 
reduce interaction latency, enforce security, and encapsulate legacy systems. In this 
paper, we introduce the Representational State Tra ... 
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The Kerberos authentication system, a part of MIT's Project Athena, has been adopted by 
other organizations. Despite Kerberos's many strengths, it has a number of limitations 
and some weaknesses. Some are due to specifics of the MIT environment; others 
represent deficiencies in the protocol design. We discuss a number of such problems, and 
present solutions to some of them. We also demonstrate how special-purpose 
cryptographic hardware may be needed in some cases. 
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Attackers can render distributed denial-of-service attacks more difficult to defend against 
by bouncing their flooding traffic off of reflectors; that is, by spoofing requests from the 
victim to a large set of Internet servers that will in turn send their combined replies to the 
victim. The resulting dilution of locality in the flooding stream complicates the victim's 
abilities both to isolate the attack traffic in order to block it, and to use traceback 
techniques for locating the source ... 

20 A framework for the transmission of stream in g media to mobile devices 
Kevin Curran, Gerard Parr 

January 2002 International Journal of Network Management volume 12 issue 1 
Publisher: John Wiley & Sons, Inc. 

Full text available: ||| pdf(3Q2.57 KB) Additional Information: full citation , abstract , references , index terms 

One interesting problem is the delay imposed upon mobile receivers when switching 
between wireless cells. We provide a solution to this in the form of an extension of Mobile 
IP's handoff algorithm. Our solution involves the exploitation of mobility prediction to 
predict a mobile terminal's future location based on its previous history (i.e. the last cell 
that it has been in) and for the media stream to be already present and cached by next 
cells base station ready for receiving by the mobile dev ... 
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software SPIN 01 

Publisher: Springer-Verlag New York, Inc. 
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Rigorous description of protocols (a sequence of events) between components is 
mandatory for specifications of distributed component frameworks. This paper reports an 
experience in formalizing and verifying behavioural aspects of the Enterprise Java Beans™ 
specification with the SPIN model checker. As a result, some potential flaws are identified 
in the EJB 1.1 specification document. The case study also demonstrates that the SPIN 
model checker is an effective tool for behavipura ... 
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Distributed applications in a wireless environment often suffer from sudden connection 
losses. Furthermore, scarce bandwidth and high error rates may affect data transmission 
so that traditional Internet protocols like TCP show unwanted behaviour. However, one of 
today's most popular middleware architectures, namely the Common Object Request 
Broker Architecture CORBA, is built on top of TCP. Hence, its extension into the wireless 
and mobile environment has to be carefully designed. This pap ... 
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In the mobile wireless computing environment of the future, a large number of users, 



http://portal.acm.org/resultsxfm?query=%2Bserver%20%2Band%20%2 9/30/2007 



Results (page 2): +server +and +(stateful +protocol) +or +(state ^request) 



Page 2 of 6 



equipped with low-powered palmtop machines, will query databases over wireless 
communication channels. Palmtop-based units will often be disconnected for prolonged 
periods of time, due to battery power saving measures; palmtops also will frequently 
relocate between different cells, and will connect to different data servers at different 
times. Caching of frequently accessed data items will be an important techni ... 
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In 1998 and again In 1999, the Lincoln Laboratory of MIT conducted a comparative 
evaluation of intrusion detection systems (IDSs) developed under DARPA funding. While 
this evaluation represents a significant and monumental undertaking, there are a number 
of issues associated with its design and execution that remain unsettled. Some 
methodologies used in the evaluation are questionable and may have biased its results. 
One problem is that the evaluators have published relatively little concer ... 

Keywords: computer security, intrusion detection, receiver operating curves (ROC), 
software evaluation 
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We describe recent work enabling fast handovers and context transfer between access 
routers offering Internet connectivity for mobile (often wireless) nodes. We present our 
framework for engineering general context transfer solutions, and a protocol which uses 
the framework to provide a simple yet general mechanism for carrying out context 
transfers during handovers. Since our mechanism operates at the network level, we 
expect that it will be the most expedient way to provide for seamless han ... 

Keywords: IPv6, context transfer, fast handover, mobile IP, mobile network 
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a SIP system 

Rudolf Pailer, Johannes Stadler 

July 2001 Proceedings of the first workshop on Wireless mobile internet WMI '01 
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The implementation of new mobile communication technologies developed in the third 
generation partnership project (3GPP) will allow to access the Internet not only from a PC 
but also via mobile phones, palmtops and other devices. New applications will emerge, 
combining several basic services like voice telephony, e-mail, voice over IP, mobility or 
web-browsing, and thus wiping out the borders between the fixed telephone network, 
mobile radio and the Internet. Offering those value-added s ... 

Keywords: SIR-PARLAY mapping, caller preferences, carrier grade services, network- 
independent services, service platform 
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The design of the IP protocol makes it difficult to reliably identify the originator of an IP 
packet. Even in the absence of any deliberate attempt to disguise a packet's origin, wide- 
spread packet forwarding techniques such as NAT and encapsulation may obscure the 
packet's true source. Techniques have been developed to determine the source of large 
packet flows, but, to date, no system has been presented to track individual packets in an 
efficient, scalable fashion. We present a hash-based techn ... 
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This article introduces Smart Packets and describes the smart Packets architecture, the 
packet formats, the language and its design goals, and security considerations. Smart 
Packets Is an Active Networks project focusing on applying active networks technology to 
network management and monitoring. Messages in active networks are programs that are 
executed at nodes on the path to one or more target hosts. Smart Packets programs are 
written in a tightly encoded, safe language specifically des ... 
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With a few exceptions, previous formal methods for reactive system design have focused 
on finite state machines represented in terms of boolean states and boolean next-state 
functions. By contrast, in many reactive system domains requirements engineers and 
developers think in terms of complex data types and expressive next-state functions. 
Formal methods for reactive system design must be extended to meet their needs as well. 
I term a reactive system function rich if expr ... 
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In this paper we describe how we combined SDLIP and STARTS, two comple mentary 
protocols for searching over distributed document collections. The resulting protocol, 
which we call SDARTS, is simple yet expressible enough to enable building sophisticated 
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metasearch engines. S DARTS can be viewed as an instantiation of SDLIP with 
metasearch-specific elements from STARTS. We also report on our experience building 
three SDARTS-compliant wrappers: for locally available plain-text document collect ... 

35 Decoupling QoS control from core routers: a novel bandwidth broker architecture for 1 
A scalable support of guaranteed services 

^ Zhi-Li Zhang, Zhenhai Duan, Lixin Gao, Yiwei Thomas Hou 

August 2000 ACM SIGCOMM Computer Communication Review , Proceedings of the 
conference on Applications, Technologies, Architectures, and Protocols 
for Computer Communication SIGCOMM '00, volume 30 issue 4 

Publisher: ACM Press 

Full text available: fB ^504.39 KB) Additional Information: full citation , abstract, references , cjtings, index 

terms 

For scalable support of guaranteed services that decouples the QoS control plane from the 
packet forwarding plane. More specifically, under this architecture, core routers do not 
maintain any QoS reservation states, whether per-flow or aggregate. Instead, QoS 
reservation states are stored at and managed by bandwidth broker(s). There are several 
advantages of such a bandwidth broker architecture. Among others, it relieves core 
routers of QoS control functions such as admissi ... 
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Multimedia capable devices for professional and private use grow digital these days. With 
the advent of short-range wireless communication capabilities, these devices gain new 
potentials such as enabling seamless collaboration within groups of devices. As a side 
effect of these technologies, new problems emerge, spatially in the area of security. This 
paper focuses on security issues to form (peer)groups among these devices. Our primary 
goal is to establish security awareness via the service ... 
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The n-calculus is a formalism of computing in which we can compositionally represent 
dynamics of major programming constructs by decomposing them into a single 
communication primitive, the name passing. This work reports our experience in using a 
linear/affine typed n-calculus for the analysis and development of type systems of 
programming languages, focussing on secure information flow analysis. After presenting a 
basic typed calculus for secrecy, we demonstrate its usage by a sound embed ... 
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Software systems of today are frequently composed from prefabricated, heterogeneous 
components that provide complex functionality and engage in complex interactions. 
Existing research on component-based development has mostly focused on component 
structure, interfaces, and functionality. Recently, software architecture has emerged as an 
area that also places significant importance on component interactions, embodied in the 
notion of software connectors. However, the current level of underst ... 
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The concept of authenticating users e.g. by means of a login process is very well 
established and there is no doubt that it is absolutely necessary and helpful in a multiuser 
environment. Unfortunately specific information about a user originating a data stream or 
receiving it, is often no longer available at the traversed network nodes. This applies to 
the even more specific question of what application is used as well. Routers, gateways or 
firewalls usually have to base their classification ... 
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